Get Logged In User endpoint

theopathy

I wrote an endpoint to get the current user logged in "community.url.com/api/getuser" and this works, I then wanted it to work on the main website page but it just returns "".

I have done: Access-Control-Allow-Origin "*", (as before I was getting CORS error), so is it possible for this to work or am I going to have to do a new method.

Many Thanks

luceos

Without seeing your api/getuser code there's no way we can help you as there are so many factors involved 😊 Your code would be the first stop though.

theopathy

<?php

namespace theopathy\sunrisedonation;
use Flarum\Extend;

use Laminas\Diactoros\Response\HtmlResponse;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Server\RequestHandlerInterface;
use Flarum\Event\ConfigureClientView;
use Illuminate\Contracts\Events\Dispatcher;
use Flarum\Settings\SettingsRepositoryInterface;
class theo implements RequestHandlerInterface
{


    public function handle(Request $request): Response
    {

	$actor = $request->getAttribute('actor');
  	$user_id = $actor->username;

        return new HtmlResponse("$user_id");

    }

} 

return [
    (new Extend\Routes('api'))
        ->get('/getuser', 'theopathy.theo', theo::class)
];

Just tried a get request works fine on the subdomain but not main domain.

theopathy

I also forgot to mention I have:
'cookie.domain' => "main_domain.com",
in my config file.

this php file on my main page returns the session ID okay,

  <?php
echo 'usr: ' . htmlspecialchars($_COOKIE["flarum_session"]);
?>

luceos

The API is only available with an access token. This token authorizes and identifies the user. If you are hitting the API with your browser - being logged in on Flarum - your cookie storage contains the required authorization. Another web app hitting the API would need to re-use the same cookie. You could try that with your server-side request.

theopathy

<?php
$cooki = $_COOKIE["flarum_session"];

$crl = curl_init();
curl_setopt($crl, CURLOPT_URL, "https://FORUMURL/api/getuser");

curl_setopt($crl, CURLOPT_RETURNTRANSFER, 1);

curl_setopt($crl, CURLOPT_HTTPHEADER, array(
    "Cookie: flarum_session=$cooki"
));

$out = curl_exec($crl);

echo "output: $out";

curl_close($crl);

Okay managed to figure it out, thanks for the help really appreciate it.